Câu 269: Isaca Certified Information Security Manager

Over the last year, an information security manager has performed risk assessments on multiple third-party vendors. Which of the following criteria would beMOST helpful in determining the associated level of risk applied to each vendor?

1. A. Compliance requirements associated with the regulation
2. B. Criticality of the service to the organization — đáp án hiện tại
3. C. Corresponding breaches associated with each vendor
4. D. Compensating controls in place to protect information security